1 00:00:00,830 --> 00:00:09,000 In this section we're going to talk about best work and best for policy so using your passwords are 2 00:00:09,000 --> 00:00:15,730 really vital for preventing authorized access to your gate well when changing the password. 3 00:00:15,900 --> 00:00:18,510 Please consider the following guidelines. 4 00:00:18,750 --> 00:00:24,200 So don't use obvious fast work like company administrators and so on. 5 00:00:24,240 --> 00:00:30,200 Also include the mission of letters numbers uppercase lowercase etc.. 6 00:00:30,600 --> 00:00:32,710 Use a password generator. 7 00:00:32,710 --> 00:00:39,210 Also change the password regularly and make the new password unique not the variation of the previous 8 00:00:39,210 --> 00:00:40,380 one. 9 00:00:40,410 --> 00:00:45,480 Write the password down and store it in a safe place away from the management computer. 10 00:00:45,540 --> 00:00:49,050 This is all for an obvious reason. 11 00:00:49,050 --> 00:00:51,530 Also define two admin logons. 12 00:00:51,600 --> 00:00:56,320 So if you lose one you lose the password for the first one. 13 00:00:56,340 --> 00:01:02,600 It's really good practice to have another app in logging available in terms of password policy. 14 00:01:02,730 --> 00:01:09,810 Well forget firewalls have the ability to create a password policy for you that lie in and following 15 00:01:09,810 --> 00:01:11,940 the best practices that we have gone through. 16 00:01:11,940 --> 00:01:13,100 Just a moment ago. 17 00:01:13,240 --> 00:01:17,020 Well here are the options available when defining the policy. 18 00:01:17,180 --> 00:01:25,160 Meaning that between 8 and 64 characters that contains upper and lower case characters password pointings 19 00:01:25,180 --> 00:01:30,490 numbers password contains no alphanumeric characters like questionmark hash map. 20 00:01:30,590 --> 00:01:37,300 You know duration of passwords so maybe the password you like for it to expire at any time. 21 00:01:37,560 --> 00:01:39,230 And where the password applies. 22 00:01:39,240 --> 00:01:41,700 So easy only for admin access. 23 00:01:41,700 --> 00:01:43,200 Is it going to be used for. 24 00:01:43,200 --> 00:01:45,720 Also for IP said connectivity. 25 00:01:45,870 --> 00:01:46,980 Or maybe both. 26 00:01:47,100 --> 00:01:53,490 So let's take a look now in the graphical user interface and see where are these options available for 27 00:01:53,490 --> 00:01:55,370 configuration. 28 00:01:55,380 --> 00:01:56,790 So first of all Longden 29 00:02:01,280 --> 00:02:03,150 go to system 30 00:02:05,960 --> 00:02:06,620 settings 31 00:02:12,070 --> 00:02:14,600 and here we have the password policy. 32 00:02:14,800 --> 00:02:22,810 So the passwords go as applied and you switch the password applied IP pre-shared key so the battle between 33 00:02:22,800 --> 00:02:28,660 the people that are establishing the site to site connectivity secure connectivity. 34 00:02:29,050 --> 00:02:32,410 Well let's say it's for both. 35 00:02:32,440 --> 00:02:44,260 Now we have let's say 80 character requirements so we have to have an uppercase lowercase number special 36 00:02:44,260 --> 00:02:46,340 character and the price. 37 00:02:46,390 --> 00:02:47,780 The password will expire. 38 00:02:47,800 --> 00:02:49,640 In this case nine days. 39 00:02:50,140 --> 00:02:53,110 So let's say the password does not expire. 40 00:02:53,320 --> 00:02:55,150 We will leave this here. 41 00:02:55,200 --> 00:02:58,740 We hit reply. 42 00:02:58,900 --> 00:03:03,400 Let's create a new administrator and see if the policy kicks in. 43 00:03:03,610 --> 00:03:13,180 So create new Whether they go pass or must contain the following rules so that admin and the password. 44 00:03:13,370 --> 00:03:17,980 It was obviously a capital A. 45 00:03:18,740 --> 00:03:25,910 So I will just open you a notepad next to the door for my face. 46 00:03:26,070 --> 00:03:30,460 I would say that means you have capital letters. 47 00:03:30,950 --> 00:03:37,390 Let's say once so that I have also number an exclamation mark. 48 00:03:37,760 --> 00:03:44,100 So just copy it here again here. 49 00:03:44,160 --> 00:03:47,080 The password must conform to the system report. 50 00:03:47,110 --> 00:03:52,680 So what is lowercase special character uppercase minimal length. 51 00:03:53,110 --> 00:03:55,970 So let's say man and then add an 52 00:04:02,480 --> 00:04:05,730 ok and split profile. 53 00:04:05,810 --> 00:04:08,710 Let's say it's main and hit OK. 54 00:04:10,250 --> 00:04:14,010 Fassler I will just go now. 55 00:04:15,630 --> 00:04:18,990 Have the new admin user and password 56 00:04:24,930 --> 00:04:32,880 and we're in luck with the new user defined with a new password that we confirm to what we have just 57 00:04:32,880 --> 00:04:36,560 said here and things 58 00:04:39,710 --> 00:04:40,600 for files.